https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:23:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223063 EUVD-2026-223063 https://cve.radiocsirt.org/vuln/euvd-2026-223063 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47197 <p>Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin.</p> <p>This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0.</p> <p>Users are recommended to upgrade to version 3.3.0, which fixes the issue.</p> <p>Archetype integration testing creates a file called ./target/classes/archetype-it/archetype-settings.xml This file contains all the content from the users ~/.m2/settings.xml file, which often contains information they do not want to publish. We expect that on many developer machines, this also contains credentials.</p> <p>When the user runs mvn verify again (without a mvn clean), this file becomes part of the final artifact.</p> <p>If a developer were to publish this into Maven Central or any other remote repository (whether as a release or a snapshot) their credentials would be published without them knowing.</p> <p>Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin.</p> <p>This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0.</p> <p>Users are recommended to upgrade to version 3.3.0, which fixes the issue.</p> <p>Archetype integration testing creates a file called ./target/classes/archetype-it/archetype-settings.xml This file contains all the content from the users ~/.m2/settings.xml file, which often contains information they do not want to publish. We expect that on many developer machines, this also contains credentials.</p> <p>When the user runs mvn verify again (without a mvn clean), this file becomes part of the final artifact.</p> <p>If a developer were to publish this into Maven Central or any other remote repository (whether as a release or a snapshot) their credentials would be published without them knowing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47197 https://cve.radiocsirt.org/vuln/ghsa-2qq7-fch2-phqf <p><strong>Affected:</strong> Maven: org.apache.maven.plugins:maven-archetype-plugin</p> <p>Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin.</p> <p>This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0.</p> <p>Users are recommended to upgrade to version 3.3.0, which fixes the issue.</p> <p>Archetype integration testing creates a file called ./target/classes/archetype-it/archetype-settings.xml This file contains all the content from the users ~/.m2/settings.xml file, which often contains information they do not want to publish. We expect that on many developer machines, this also contains credentials.</p> <p>When the user runs mvn verify again (without a mvn clean), this file becomes part of the final artifact.</p> <p>If a developer were to publish this into Maven Central or any other remote repository (whether as a release or a snapshot) their credentials would be published without them knowing.</p> <p><strong>Affected:</strong> Maven: org.apache.maven.plugins:maven-archetype-plugin</p> <p>Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin.</p> <p>This issue affects Maven Archetype Plugin: from 3.2.1 before 3.3.0.</p> <p>Users are recommended to upgrade to version 3.3.0, which fixes the issue.</p> <p>Archetype integration testing creates a file called ./target/classes/archetype-it/archetype-settings.xml This file contains all the content from the users ~/.m2/settings.xml file, which often contains information they do not want to publish. We expect that on many developer machines, this also contains credentials.</p> <p>When the user runs mvn verify again (without a mvn clean), this file becomes part of the final artifact.</p> <p>If a developer were to publish this into Maven Central or any other remote repository (whether as a release or a snapshot) their credentials would be published without them knowing.</p> https://cve.radiocsirt.org/vuln/ghsa-2qq7-fch2-phqf https://cve.radiocsirt.org/vuln/opensuse-su-2024:14372-1 <p>maven-archetype-3.3.0-1.1 on GA media</p> <p>maven-archetype-3.3.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14372-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0809 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Siebel CRM ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Siebel CRM ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0809